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(57) Plural Web pages 5 that are provided by a serv- 
er include specified Web pages to which access is per- 
mitted only to specified users. When the server accepts 
specified userauthentication information inputted by the 
user, the server transmits a specified Web page 1 3 that 
has a flag embedded therein to the terminal of the user. 
When the specified user who accessed the specified 
Web page 13 requests access to another specified Web 
page, the server receives link data 31 . Only when a flag 
32 that is simultaneously received is effective, a next 
specified Web page is transmitted to the terminal. Ac- 
cordingly, only when a specified user requests access 
according to a normal procedure, a corresponding Web 
page is transmitted to the user and access is permitted. 
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Description 

BACKGROUND OF THE INVENTION 
FIELD OF THE INVENTION 

[0001] The present invention relates to a Web page 
access restriction method and a server system that dis- 
criminates specified users from general users to allow 
access to a Web page. 

DESCRIPTION OF PRIOR ART 

[0002] In networks such as the Internet, various infor- 
mation is published on Web pages. The Web pages in- 
clude pages that can be freely accessed by anyone and 
pages that can be accessed only by users who are for- 
mally registered. A Web page memory apparatus of a 
server is provided with, for example, folders that store 
Web pages that can be freely accessed by anyone and 
folders that store Web pages that can be accessed only 
by specified users. 

[0003] When there is an access request of a Web 
page that can be accessed only by specified users, an 
operating system of the server requests the user to input 
a user ID and a password. Only when the inputted user 
ID and the password are formally registered, the oper- 
ating system will allow access to that Web page. 
[0004] The conventional technology described above 
has the following problems to be solved. 
[0005] As described above, an ordinary operating 
system may be equipped with a function to restrict ac- 
cesses to each folder. However, in order to restrict ac- 
cesses, the users need to be registered in the operating 
system itself. However, as the number of users for the 
operating system is increased, entrances to the system 
may be increased, which is not desirable in terms of se- 
curity. Also, when the number of users is increased, 
management of the users becomes more complex. 
[0006] In accordance with another method, specified 
Web pages that do not publish their URLs are prepared 
for the users. 

[0007] On a Web page displayed on a terminal of a 
user, aframe may be provided for inputting data for iden- 
tifying the user, such as, a user ID, a password or the 
like. When the user inputs a correct user ID and pass- 
word on the Web page, the server generates a URL (uni- 
form resource locator) that allows access to a specified 
Web page, and transmits the specified Web page to the 
user's terminal. 

[0008] When the correct user ID or password is not 
inputted, the user cannot access a specified Web page. 
However, if the user knows the URL of the specified Web 
page, and directly inputs that URL from his browser, he 
can access the specified Web page. Therefore it is dif- 
ficult to securely prevent unauthorized accesses. 



DESCRIPTION OF THE INVENTION 

[0009] The present invention employs the following 
compositions to solve the problems described above. 

5 

Composition 1> 

[0010] A Web page access restriction method is char- 
acterized in that a plurality of Web pages provided by a 
10 server include a specified Web page that allows access 
only for a specified user, wherein, when the server de- 
termines that user authentication information transmit- 
ted from a terminal side belongs to the specified user, 
the server embeds a flag indicating that user authenti- 
15 cation is completed in the specified Web page for the 
specified user and transmits the same to a terminal of 
the specified user. 

[0011] Web pages that are published by a server 
through a network such as the Internet include those 
20 that can be freely accessed by anyone and those that 
can be accessed only by specified users. The server de- 
termines whether a user is a the specified user. Authen- 
tication information of specified users refers to informa- 
tion for authentication of the users such as user IDs and 
25 passwords. A flag indicating that user authentication 
has been completed is embedded in orderforthe server 
to be able to determine whether a Web page is a spec- 
ified Web page to which access is permitted after user 
authentication has been completed. As a result, when 
30 the user accesses another specified page later, another 
user authentication is not necessary. 

Composition 2> 

35 [0012] In the Web page access restriction method ac- 
cording to Composition 1 , the Web page access restric- 
tion method is characterized in that the specified Web 
page for the specified user is generated anew in the 
server after user authentication is completed. 
40 [0013] The term "generating anew" includes situa- 
tions in which an entire Web page is generated and sit- 
uations in which a Web page is used as a base to gen- 
erate remaining portions of another Web page. 
[0014] When a specified Web page is generated after 
^5 authentication, the specified Web page cannot be ac- 
cessed without the user authentication. Also when spec- 
if ied Web pages that have different contents for different 
users are provided, a Web page having common por- 
tions is prepared, and it is modified after completion of 
50 user authentication and then transmitted. In this man- 
ner, a large number of Web pages does not need to be 
stored in a storage device. 

Composition 3> 

55 

[0015] In the Web page access restriction method ac- 
cording to Composition 1 or Composition 2, the Web 
page access restriction method is characterized in that 
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the flag is directly embedded in the specified Web page. 
[0016] A flag may also be embedded in a predeter- 
mined location of data for displaying a Web page. 

Composition 4> 

[0017] In the Web page access restriction method ac- 
cording to Composition 1 or Composition 2, the Web 
page access restriction method is characterized in that 
the flag is embedded in any data that is required to dis- 
play a specified Web page. 

[001 8] All data for displaying a Web page that are sent 
from the serverto a user's terminal are data required for 
displaying the specified Web page. The flag may be in- 
cluded in some part of the data. 

Composition 5> 

[0019] In the Web page access restriction method ac- 
cording to Composition 1 or Composition 2, the Web 
page access restriction method is characterized in that 
the flag is encoded and embedded in the Web page. 
[0020] This is done in order for a third person not to 
be able to recognize if a flag is embedded in a Web 
page. "Encoding" means making a flag in a form that 
cannot be readily recognized, and it can be in any form. 

Composition 6> 

[0021] In the Web page access restriction method ac- 
cording to Composition 1 or Composition 2, the Web 
page access restriction method is characterized in that, 
when link data for accessing a new specified Web page 
that uses the specified Web page displayed on a termi- 
nal of the user after completion of user authentication is 
sent to the server, the server determines whether or not 
an effective flag to be transmitted from the terminal of 
the user together with the link data is present, and when 
the flag is effective, the new specified Web page is trans- 
mitted to the terminal of the user. 
[0022] According to the present invention, when a 
specified Web page is accessed after completion of user 
authentication, another user authentication process is 
not required. The specified Web page is embedded with 
a flag. When the new specified Web page is accessed, 
the flag is sent from the user's terminal at the same time. 
When the server detects an effective flag, it determines 
that it is an access request by the specified user. A case 
where a flag is not effective may mean it is a case where 
a flag cannot be received or a case where a received 
flag is ineffective. 

Composition 7> 

[0023] In the Web page access restriction method ac- 
cording to Composition 6, the Web page access restric- 
tion method is characterized in that, when the flag is ef- 
fective, a new specified Web page with the flag embed- 



ded therein is transmitted to the user's terminal. 
[0024] By embedding the flag in the new specified 
Web page, the same process can be conducted when 
an access to another new Web page is requested again. 

5 

Composition 8> 

[0025] A Web page access restriction method is char- 
acterized in that a plurality of Web pages provided by a 

10 server include a specified Web page that allows access 
only to a specified user, wherein, when the server de- 
termines that user authentication information transmit- 
ted from a terminal side belongs to the specified user, 
the server embeds a flag indicating that user authenti- 

15 cation has been completed in the specified Web page 
forthe specified user and adds thereto a link data trans- 
mission restriction program that enables transmission 
of link data for accessing a new specified Web page to 
the server only when the flag is effective, and transmits 

20 the same to a terminal of the specified user. 

[0026] When the specified Web page displays a but- 
ton for allowing transmission of link data to the server 
for accessing a new specified Web page, and when this 
button is clicked, the link data can be transmitted to the 

25 server. It is noted that the new specified Web page is a 
Web page to which only the specified user is authorized 
access. In this instance, the link data transmission re- 
striction program determines the effectiveness of the 
flag. When the link data transmission restriction pro- 

30 gram determines that the flag is effective, the link data 
is permitted to be transmitted to the server. In other cas- 
es, transmission of the link data is prohibited. Therefore, 
the server can transmit a specified Web page to a ter- 
minal without performing a special determination proc- 

35 ess. 

Composition 9> 

[0027] A server system that is connected to terminals 
40 used by users through a network, comprises a received 
data recognition section that determines whether or not 
user authentication information transmitted from a ter- 
minal side belongs to a specified user, and a Web page 
transmission section that, when the user authentication 
45 information is determined to belong to the specified us- 
er, embeds a flag indicating completion of user authen- 
tication in a specified Web page for the specified user 
and transmits the same to the terminal of the specified 
user. 

50 [0028] The above is a system to perform the method 
of Composition 1. 

Composition 10> 

55 [0029] The server system according to Composition 
9, further comprises a flag detection section that, when 
link data for accessing a new specified Web page using 
a specified Web page displayed on the terminal of the 
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user after completion of user authentication is transmit- 
ted to the server, determines whether or not an effective 
flag to be transmitted from the terminal of the user to- 
gether with the link data is present, wherein the Web 
page transmission section transmits the new specified 
Web page to the terminal of the user when the flag is 
effective. 

[0030] The above is a system to perform the method 
of Composition 6. 

Composition 11> 

[0031] In the server system according to Composition 
1 0, the Web page transmission section is characterized 
in that, when the flag is effective, a new specified Web 
page with the flag embedded therein is transmitted to 
the terminal of the user. 

[0032] The above is a system to perform the method 
of Composition 7. 

Composition 12> 

[0033] A server system that is connected to terminals 
used by users through a network, comprises a received 
data recognition section that determines whether or not 
user authentication information transmitted from a ter- 
minal side belongs to a specified user, and a Web page 
transmission section that, when the user authentication 
information is determined to belong to the specified us- 
er, embeds a flag indicating that user authentication is 
completed in a specified Web pageforthe specified user 
and adds thereto a link data transmission restriction pro- 
gram that enables transmission of link data for access- 
ing a new specified Web page to the server only when 
the flag is effective, and transmits the same to a terminal 
of the specified user. 

[0034] The above is a system to perform the method 
of Composition 8. 

Composition 13> 

[0035] A Web page to which access is permitted only 
to a specified user is characterized in that a flag is em- 
bedded therein which indicates that a determination has 
been made that user authentication information trans- 
mitted from a terminal side belongs to the specified user 
and user authentication has been completed. 
[0036] The above is a structure of a Web page for per- 
forming Composition 1 or the like. 

Composition 14> 

[0037] In the Web page according to Composition 13, 
the Web page is characterized in that a link data trans- 
mission restriction program is added thereto which en- 
ables transmission of link data for accessing a new 
specified Web page to the server only when the flag is 
effective. 



[0038] The above is a Web page for performing Com- 
position 8. 

Composition 15> 

5 

[0039] A computer readable storage medium that 
stores a computer program that executes a process of 
determining whether or not user authentication informa- 
tion transmitted from a terminal side belongs to a spec- 
10 ified user, and a process of embedding a flag indicating 
that user authentication is completed in a specified Web 
page and transmitting the same to a terminal of the 
specified user. 

[0040] The above provides a computer program for a 
15 server for performing the invention of Composition 1 . 

Composition 16> 

[0041] In the storage medium according to Composi- 
te tion 15, the computer readable storage medium stores 
a computer program that executes a process of, when 
link data for accessing a new specified Web page using 
a specified Web page displayed on the terminal of the 
user after completion of user authentication is transmit- 
25 ted to the server, determining whether or not an effective 
flag to be transmitted from the terminal of the user to- 
gether with the link data is present, and a process of 
transmitting the new specified Web page to the terminal 
of the user when the flag is effective. 
30 [0042] The above provides a computer program for a 
server for performing the invention of Composition 6. 

Composition 17> 

35 [0043] A computer readable storage medium stores a 
computer program that executes a process of determin- 
ing if user authentication information transmitted from a 
terminal side belongs to a specified user, a process of 
embedding a flag indicating that user authentication is 

40 completed in a specified Web page that permits access 
only to the specified user, and a process of adding a link 
data transmission restriction program that enables 
transmission of link data for accessing a new specified 
Web page to the server only when the flag is effective 

45 and transmitting the same to a terminal of the specified 
user. 

[0044] The above is software for a server for perform- 
ing Composition 8. 

50 BRIEF DESCRIPTOR OF THE DRAWINGS 

[0045] Fig. 1 is a block diagram of a system that real- 
izes a Web page access restriction method in accord- 
ance with one embodiment of the present invention. 
55 [0046] Fig. 2 is an illustration that describes an entire 
system including a network between a server and a ter- 
minal. 

[0047] Fig. 3 is an illustration that describes a linksta- 
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tus of Web pages stored in a Web page storage section 
4. 

[0048] Fig. 4 shows a system block diagram that de- 
scribes an operation to authenticate if a user is speci- 
fied. 

[0049] Fig. 5 is a flowchart of an authentication oper- 
ation by the server, using the authentication Web page 
10 shown in Fig. 4. 

[0050] Fig. 6 is a flowchart of operation of the server 
after user authentication is completed in the system 
shown in Fig. 1. 

[0051] Fig. 7 shows a variation example of the system 
in accordance with the present invention, in which Fig. 
7(a) is an explanatory illustration of a Web page, and 
Fig. 7 (b) shows an operation flowchart at a terminal. 

BEST MODE OF THE INVENTION 

[0052] Embodiments of the present invention are de- 
scribed below. 

[0053] Fig. 1 is a block diagram of a system for imple- 
menting a Web page access restriction method in ac- 
cordance with one embodiment of the present invention. 
Priorto describing this figure, a network between a serv- 
er and a terminal and asystem fortransmitting Web pag- 
es are described. 

[0054] Fig. 2 is an illustration that describes an entire 
system including a network between a server and a ter- 
minal. 

[0055] A network 1 in the figure may preferably be the 
Internet. In addition, any types of networks such as tel- 
ephone networks, Intranet and the like may also be ap- 
plicable. 

[0056] The network 1 is connected to a server 2 and 
a terminal 3. The server 2 is equipped with a Web page 
storage section 4 that stores Web pages 5 to be distrib- 
uted to the network. For example, in this embodiment 
example, the storage section 4 stores an index page, as 
well as pages including page A, page B, page C that are 
linked to the index page, and pages including page D, 
page E, page F that belong to a folder W. The Sever 
allows the user using a terminal to access the Web pag- 
es 5 through the network 1 . 

[0057] Fig. 3 is an illustration that describes a link sta- 
tus of the Web pages that are stored in the Web page 
storage section 4. 

[0058] As shown in the figure, the index page, which 
is a home page, is initially accessed (that is indicated as 
"index" in the figure). 

[0059] The index page is linked to Web pages that are 
represented as, for example, page A or page B. Also, 
page B is linked to a Web page that is presented as page 
C. Let us assume that these pages are freely accessible 
by general users. 

[0060] On the other hand, page C is not only linked to 
other pages that can be freely accessible by anyone 
(that are indicated as "page ..." in the figure), but also is 
linked to an authentication Web page 1 0 that is used to 



authenticate whether the user is a specified user who 
has previously completed a predetermined registration 
process in the server 1 0 shown in Fig. 2. When the au- 
thentication Web page authenticates the specified user, 
5 the specified user is allowed to access page D. Also, 
page D is linked to page E and page F. In orderto restrict 
such an access, asystem such as the one shown in Fig. 
1 is employed. 

[0061] Referring to Fig. 1 , the plurality of Web pages 
10 5 stored in the Web page storage section 4 in the server 
include specified Web pages that permit access only by 
specified users. The authentication Web page 10 dis- 
played on a terminal is a Web page that is used to au- 
thenticate a user that can access the specified Web pag- 
15 es. In this example, a user ID input frame 11 (that is gen- 
erally called a text box) and a password input frame 1 2 
are displayed. 

[0062] The figure shows a state in which user authen- 
tication has already been completed and a first specified 
20 Web page 1 3 that allows access only to the user is dis- 
played. 

[0063] A Web page access button 14 for accessing 
other specified Web pages is displayed in the specified 
Web page 13. In addition, the specified Web page 13 
25 includes a flag storage section 15 for embedding a pre- 
determined flag. 

[0064] The flag contains information to identify wheth- 
er the Web page is a page being accessed by an au- 
thenticated specified user. In this example, the flag is 
30 directly embedded in the specified Web page 13. How- 
ever, the flag can be included in any data that may be 
needed to display the specified Web page 13, and may 
not necessarily be directly embedded in the data of the 
Web page. 

35 [0065] When the flag is embedded in the specified 
Web page, it may preferably be encoded so that a third 
person cannot readily recognize the embedded flag. Al- 
so, theflag may be included in an argumentthat is hand- 
ed over when a new specified Web page to be displayed 

40 subsequently to the specified Web page is displayed. 
[0066] In this embodiment, information for identifying 
a person, such as, a user ID and a password are referred 
to as specified user authentication information. The user 
ID input frame 11 and the password input frame 12 are 

45 frames for inputting specified user authentication infor- 
mation. The user authentication information that is in- 
putted in the frames is transferred to the server through 
the network 1 . Also, a page access button 14 is a button 
for transmitting link data for linking to a Web page that 

50 can be accessed only by specified users. 

[0067] The server is provided with a communication 
section 21, a received information recognition section 
22, a flag detection section 23, a Web page transmission 
section 24 and a Web page storage section 4. The com- 

55 munication section 21 is connected to the network, it 
controls transmission of Web pages or reception of data, 
and it is implemented by hardware or software. The re- 
ceived information recognition section 22 executes a 
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process for recognizing user authentication information 
or link data transmitted from a terminal side. 
[0068] When the received information recognition 
section 22 recognizes the reception of link data from a 
terminal, for example, the flag detection section 23 is 
able to detect a flag that has been simultaneously trans- 
mitted and determining the effectiveness thereof. The 
Web page transmission section is able to transmit the 
specified Web page to the terminal only when the flag 
in the flag storage section 15 is effective. The received 
information recognition section 22, the flag detection 
section 23 and the Web page transmission section 24 
may be also implemented, for example, by software 
having the functions described above. 
[0069] Fig. 4 shows a system block diagram that de- 
scribes an operation to determine if a user is a specified 
user. 

[0070] Authentication of a user can be done by deter- 
mining whether a corresponding user ID, a password or 
the like is registered in user information 35 stored in the 
user information storage section 36 provided in theserv- 
er, as shown in the figure. The received information rec- 
ognition section 22 is capable of referring to the user 
information 36, and requesting the Web page transmis- 
sion section 24 to transmit a specified Web page when 
a determination is made that the user authentication in- 
formation 16 transmitted from a terminal belongs to a 
specified user The Web page transmission section 24 
is capable of reading a Web page 5 stored in the Web 
page storage section 4, generating a specified Web 
page exclusive for the specified user by using data in- 
cluded in the user information 36 depending on the re- 
quirements, and transmitting the Web page to the ter- 
minal of the user. Also, at this moment, a flag is embed- 
ded in the specified Web page. The flag contains infor- 
mation indicating that user authentication has been 
completed. 

[0071] Fig. 5 is a flowchart of an authentication oper- 
ation by the server, using the authentication Web page 
10 shown in Fig. 4. 

[0072] First, when the authentication Web page 10 
shown in Fig. 4 is displayed on the terminal of the user, 
the user inputs a user ID in the user ID input frame 11 
and a password in the password input frame 12. The 
server receives the user verification information inputted 
in these frames 11 and 12 through the network 1 (step 
S1, step S2). 

[0073] In step S3, the received information recogni- 
tion section 22 of the server refers to the user informa- 
tion 36 shown in Fig. 4., and makes a determination 
whether or not the user authentication information 16 
belongs to a specified user (step S4). When it is deter- 
mined that the information 1 6 belongs to a specified us- 
er, the received information recognition section 22 noti- 
fies the same to the Web page transmission section 24. 
[0074] The Web page transmissions section 24 gen- 
erates a specified Web page for the user in Step 5. In a 
succeeding step S6, the Web pagetransmission section 



24 embeds a flag in the generated specified Web page. 
In a succeeding step S7, the Web page transmission 
section 24 transmits the specified Web page to the ter- 
minal of the user. When it is determined in step S4that 
5 the user authentication information 1 6 does not belong 
to a specified user, an error indication is displayed on 
the terminal of the user and the process is completed. 
[0075] Fig. 6 is a flowchart of an operation of the serv- 
er after user authentication is completed in the system 
shown in Fig. 1. 

[0076] Referring to Fig. 1 and Fig. 6, the operation of 
the system is described. First, as shown in Fig. 1 , a first 
specified Web page 1 3 after completion of user authen- 
tication is displayed on the terminal of the user. If the 
user desires to access a new specified Web page later, 
the user clicks the page access button 14 in Step S11, 
which causes link data 31 to betransmitted to the server. 
At this moment, a flag 32 stored in the flag storage sec- 
tion 15 is simultaneously transmitted to the server. 
[0077] The server initially determines whether or not 
it is an access request for a specified Web page in step 
S12. When it is not an access request for a specified 
Web page, then the server proceeds to a normal Web 
page display process (step S17). In the case of an ac- 
cess request for a specified Web page, the received in- 
formation recognition section 22 accepts the link data 
31 , and the flag detection section 23 determines wheth- 
er or not the flag 32 is effective (step S13). When the 
flag is ineffective, an error display is made on the termi- 
nal of the user, and a Web page access is rejected (step 
S18). 

[0078] When the flag is effective, the Web page trans- 
mission section 24 generates a specified Web page for 
the user in step S14. In a succeeding step S15, the Web 
page transmission section 24 embeds a flag in the gen- 
erated specified Web page, and in a succeeding step 
S16, the Web page transmission section 24 transmits 
the specified Web page to the terminal of the user. 
[0079] A specified Web page that can be accessed 
only by a specified user may be formed in a mannerthat 
it can be opened on each individual instance by the au- 
thentication process shown in Figs. 4 and 5. 
[0080] However, it is troublesome if the user ID and 
the password need to be inputted every time pages to 
be accessed are switched after the user ID and pass- 
word are once inputted. Therefore, in this example, as 
shown in the flowchart shown in Fig. 6, the user inputs 
the user ID andthe password once forthefirsttime, then 
the next page can be accessed by clicking the page ac- 
cess button. 

[0081] As shown in Fig. 1 , a frame 30 is prepared for 
inputting an Internet address (a URL of the Web page 
to be referred to) in a browser that displays the Web 
page 1 0 or 1 3. Let us assume that, for example, a user 
B may directly input the URL of the specified Web page 
from the frame in order to see the specified Web page 
to which access is permitted only to a user A. Although 
the URL is kept secret, the user B may obtain the URL 
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by some means. 

[0082] Conventionally, a server does not have means 
to discriminate an access request by the user A from 
others, and could transmit a specified Web page to an 
unauthorized user's terminal. In accordance with the 
present invention, the flag 32 is detected for discrimina- 
tion, and therefore the specified Web page can be trans- 
mitted only to the user A who has undergone an authen- 
tication process. 

[0083] Fig. 7 shows a variation example of the system 
in accordance with the present invention, in which Fig. 
7(a) is an explanatory illustration of a Web page, and 
Fig. 7 (b) shows an operation flowchart at a terminal. 
[0084] A specified Web page 18 also has a page ac- 
cess button 14 and a flag storage section 15 in a similar 
manner as the specified Web page 13 shown in Fig. 1 
does. Functions of these elements are the same as 
thoseshown in Fig 1 . Inthis example, thespecified Web 
page 18 is additionally provided with a link data trans- 
mission restriction section 19. 
[0085] The link data transmission restriction section 
1 9 may be implemented by a simple program added to 
the specified Web page 18, which may be written , for 
example, in Java Script (an object-oriented script lan- 
guage developed by Netscape). 
[0086] As shown in Fig. 7 (b), when the Web page ac- 
cess button 1 4 is clicked by the user (step S20) to make 
link data ready for transmission, the link data transmis- 
sion restriction section 1 9 refers to the flag storage sec- 
tion 15 (step S21), and determines whether or not the 
flag is effective (step S22). Further, the link data trans- 
mission restriction section 19 is capable of transmitting 
the link data to the server only when the flag is effective 
(step S23). In this manner, a determination which is 
done by the server in the previous embodiment example 
is performed on the Web page side, and therefore the 
server can immediately transmitthe specified Web page 
without a special determination process by the server 
side. 

[0087] By the process described above, the corre- 
sponding Web page is transmitted to the user and the 
user is allowed access only when the specified user 
makes an access request according to the normal pro- 
cedure. 

[0088] It is noted that the functional blocks of the serv- 
er shown in Fig. 1 may be implemented by individual 
program modules, or may be formed from an integrated 
program module. Also, all of the functional blocks or 
parts thereof may be implemented by hardware with log- 
ic circuits. Also, each of the program modules may be 
incorporated into an existing application program or may 
be operated as independent programs. 
[0089] A computer program that realizes the invention 
described above may be stored in a computer readable 
storage medium, such as CD-ROM, and can be installed 
for the use. Also, the computer program can be down- 
loaded onto a computer memory through the network 
for the use. 



Claims 

1. A Web page access restriction method character- 
ized in that a plurality of Web pages that are pro- 

5 vided by a server include a specified Web page to 
which access is permitted only to a specified user, 
wherein, when said server determines that user au- 
thentication information transmitted from a terminal 
side belongs to said specified user, the server em- 

10 beds a flag indicating that user authentication is 
completed in the specified Web page for the spec- 
ified user and transmits the same to a terminal of 
said specified user. 

15 2. A Web page access restriction method according to 
claim 1 , wherein the specified Web page of the 
specified user is generated anew in the server after 
user authentication is completed. 

20 3. A Web page access restriction method according to 
claim 1 or claim 2, wherein the flag is directly em- 
bedded in the specified Web page. 

4. A Web page access restriction method according to 
25 claim 1 or claim 2, wherein said flag is embedded 

in any data that is required to display a specified 
Web page. 

5. A Web page access restriction method according to 
30 claim 1 or claim 2, wherein the flag is encoded and 

embedded in said Web page. 

6. A Web page access restriction method according to 
claim 1 or claim 2, wherein, when link data for ac- 

35 cessing a new specified Web page that uses a spec- 
ified Web page displayed on a terminal of the user 
after completion of user authentication is sent to the 
server, said server determines whether or not an ef- 
fective flag to be transmitted from the terminal of the 

40 usertogether with the link data is present, and when 
the flag is effective, said new specified Web page 
is transmitted to the terminal of said user. 

7. A Web page access restriction method according to 
45 claim 6, wherein, when said flag is effective, a new 

specified Web page with the flag embedded therein 
is transmitted to the terminal of said user. 



8. A Web page access restriction method character- 
50 ized in that a plurality of Web pages that are pro- 
vided by a server include a specified Web page to 
which access is permitted only to a specified user, 
wherein, when the server determines that user au- 
thentication information transmitted from a terminal 
55 side belongs to the specified user, the server em- 
beds a flag indicating that user authentication has 
been completed in the specified Web page for the 
specified user and adds thereto a link data trans- 
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mission restriction program that enables transmis- 
sion of link data for accessing a new specified Web 
page to the server only when the flag is effective, 
and transmits the same to a terminal of the specified 
user. 

9. A server system that is connected to terminals used 
by users through a network, comprising: 

a received data recognition section that deter- 
mines whether or not user authentication infor- 
mation transmitted from a terminal side belongs 
to a specified user; and 
a Web page transmission section that, when 
the user authentication information is deter- 
mined to belong to the specified user, embeds 
a flag indicating completion of user authentica- 
tion in a specified Web page for the specified 
user and transmits the same to the terminal of 
said specified user. 

10. A server system according to claim 9, further com- 
prising a flag detection section that, when link data 
for accessing a new specified Web page using a 
specified Web page displayed on the terminal of the 
user after completion of user authentication is trans- 
mitted to the server, determines whether or not an 
effective flag to be transmitted from the terminal of 
said user together with said link data is present, 

wherein the Web page transmission section 
transmits said new specified Web page to the ter- 
minal of said user when said flag is effective. 

1 1 . A server system according to claim 1 0, wherein the 
Web page transmission section transmits a new 
specified Web page with said flag embedded there- 
in to the terminal of the user when the flag is effec- 
tive. 

1 2. A server system that is connected to terminals used 
by users through a network, the server system com- 
prising: 

a received data confirmation section that deter- 
mines whether or not user authentication infor- 
mation transmitted from a terminal side belongs 
to a specified user; and 
a Web page transmission section that, when 
the user authentication information is deter- 
mined to belong to the specified user, embeds 
a flag indicating that user authentication has 
been completed in a specified Web pageforthe 
specified user and adds thereto a link data 
transmission restriction program that enables 
transmission of link data for accessing a new 
specified Web page to the server only when 
said flag is effective, and transmits the same to 
a terminal of said specified user. 



13. A Web page to which access is permitted only to a 
specified user, the Web page comprising a flag em- 
bedded therein which indicates that a determination 
has been made that user authentication information 

5 transmitted from a terminal side belongs to the 
specified user and user authentication has been 
completed. 

1 4. A Web page according to claim 13, further compris- 
10 ing a link datatransmission restriction program add- 
ed thereto that enables transmission of link data for 
accessing a new specified Web page to the server 
only when the flag is effective. 

*s 15. A computer readable storage medium that stores a 
computer program for executing: 

a process of determining whether or not user 
authentication information transmitted from a 
20 terminal side belongs to a specified user: and 

a process of embedding a flag indicating that 
user authentication is completed in a specified 
Web page and transmitting the same to a ter- 
minal of said specified user. 

25 

16. A computer readable storage medium according to 
claim 15: wherein a computer program is stored 
thereon for executing: 

30 a process of, when link data for accessing a 

new specified Web page using a specified Web 
page displayed on the terminal of the user after 
completion of user authentication is transmitted 
to the server, determining whether or not an ef- 
35 fective flag to be transmitted from the terminal 

of the user together with the link data is present; 
and a process of transmitting the new specified 
Web page to the terminal of the user when the 
flag is effective. 

40 

1 7. A computer readable storage medium that stores a 
computer program for executing: 

a process of determining if user authentication 
45 information transmitted from a terminal side be- 

longs to a specified user: 
a process of embedding a flag indicating that 
user authentication has been completed in a 
specified Web page to which access is permit- 
50 ted only to said specified user: and 

a process of adding a link datatransmission re- 
striction program that enables transmission of 
link data for accessing a new specified Web 
page to the server only when said flag is effec- 
55 tive and transmitting the same to a terminal of 

said specified user. 
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